Remote code execution

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability"...

Information disclosure

Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability"...

Privilege escalation

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege...

Privilege escalation

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege...

Information disclosure

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due ...

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...

CVE-2018-0815

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, a...

CVE-2018-0939

CVE-2018-0939 corresponds to a ChakraCore/Microsoft Edge information-disclosure vulnerability affecting Windows 10 (v1703/v1709). The issue arises from how the scripting engine handles objects in memory, enabling potential information disclosure. The connected advisories (GHSA-XGCC-R2F3-RQ6P) and...

CVE-2018-0891

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due ...

CVE-2018-0932

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information...

CVE-2018-0983

Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability"...

EUVD-2018-1692

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

CVE-2018-0977

CVE-2018-0977: Elevation of privilege in the Windows kernel mode driver (Win32k) due to improper handling of objects in memory. Affected: Windows 10 releases Gold, 1511, 1607, 1703, 1709; Windows Server 2016 and Windows Server 1709. Impact is local privilege escalation with full compromise of con...

CVE-2018-0884

Windows Scripting Host WSH in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to how objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability". This CVE is unique from...

CVE-2018-0903

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability"...

CVE-2018-0903

CVE-2018-0903 affects Microsoft Access products: Access 2010 SP2, Access 2013 SP1, Access 2016, and Office 2016 Click-to-Run. The issue is a remote code execution vulnerability caused by how objects are handled in memory, allowing arbitrary code execution when a user opens a specially crafted fil...

CVE-2018-0879

CVE-2018-0879 affects Microsoft Edge (EdgeHTML-based) on Windows 10 version 1709. The vulnerability arises from Edge’s handling of objects in memory, causing information disclosure. The CVE is described as an Edge Information Disclosure Vulnerability. Affected products include Microsoft Edge (Edg...

EUVD-2018-1719

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka...

Microsoft Browser Information Disclosure Vulnerability (CNVD-2018-06789)

Microsoft Windows 7 SP1 and others are a series of operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE and Edge are web browsers that come with Windows operating systems. An information disclosure vulnerability exists in Microsoft IE 11 and Edge. The vulnerability...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2018-06763)

Microsoft Windows 7 SP1 and others are a series of operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE and Edge are web browsers that come with Windows operating systems. An information disclosure vulnerability exists in Microsoft IE 10 and 11 and Edge, which aris...